Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa
File:                     323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa (raw, json)
Hash identifier:          8Hue1hBHJCYGYfENfgtWyEOI44vn6a8SoWOo1GZ+NvQ=
Subject key identifier:   DE:D8:06:B3:76:CF:59:FC:DB:C5:78:37:CA:57:8E:40:BF:9A:51:B7
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7D8899DB9B6F0710352D46944EEFF35D738A166A
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa
Signing time:             Tue 04 Feb 2025 18:45:18 +0000
ROA not before:           Tue 04 Feb 2025 18:40:18 +0000
ROA not after:            Tue 03 Feb 2026 18:45:18 +0000
asID:                     271891
IP address blocks:        2801:151:63::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:88:99:db:9b:6f:07:10:35:2d:46:94:4e:ef:f3:5d:73:8a:16:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:18 2025 GMT
            Not After : Feb  3 18:45:18 2026 GMT
        Subject: CN=DED806B376CF59FCDBC57837CA578E40BF9A51B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:08:cd:b6:43:ea:d7:c6:fb:c9:90:c1:47:
                    35:40:7f:69:b3:14:ad:2c:0e:d0:64:a6:7c:69:12:
                    b9:c8:d4:b4:9b:98:eb:42:c4:7e:25:a4:0a:51:41:
                    8e:0c:1c:d7:61:62:f3:21:67:40:69:a7:61:48:5a:
                    ae:7e:d4:88:00:5c:2e:79:f3:88:3a:e4:9b:92:b7:
                    9d:e0:8b:8b:1e:40:33:a0:b0:13:82:a3:d0:6a:99:
                    7d:97:b2:ec:c8:3f:4c:fa:50:d7:97:5e:44:35:77:
                    81:b7:14:8a:b6:6a:f6:0b:e7:9f:0c:e3:09:88:d6:
                    3a:15:54:58:30:5d:62:f8:59:09:f7:20:e7:6b:78:
                    a9:ab:22:f7:3e:82:80:b7:0d:68:53:46:c1:f4:23:
                    8c:63:d7:bd:7a:11:d5:01:9a:65:66:2b:e3:55:7c:
                    03:3e:4e:aa:46:68:31:89:a3:61:b7:f4:c7:4e:9e:
                    77:72:bc:11:b9:02:5f:34:c0:1f:c1:4f:d2:2c:1a:
                    21:4b:86:4e:d4:43:41:b1:06:af:14:ff:7c:91:11:
                    91:03:41:b9:dc:6b:67:2b:5e:4f:7e:5c:93:37:94:
                    6f:59:bb:ea:d1:a2:a1:5b:88:7b:22:e0:cc:1f:ce:
                    77:7a:8d:53:0a:f2:4d:d1:cc:c4:21:20:fb:f5:24:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D8:06:B3:76:CF:59:FC:DB:C5:78:37:CA:57:8E:40:BF:9A:51:B7
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/323830313a3135313a36333a3a2f34382d3438203d3e20323731383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:63::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:99:b4:e5:60:ac:63:53:b6:df:c9:88:86:91:c2:81:3a:
         52:50:bf:ab:9b:55:6d:9c:6f:69:89:0f:bb:0b:fb:c7:a8:c0:
         53:a8:43:24:16:ce:e3:33:0f:6b:d3:4e:b1:92:05:9c:2a:97:
         b8:5e:cd:41:8a:00:ee:39:de:23:6a:f9:83:10:c1:44:b2:1b:
         02:70:23:af:fb:e5:cc:d5:40:5d:73:db:e0:04:9d:49:80:60:
         65:7f:8c:1d:15:fe:5d:a7:0b:cd:b6:4f:6f:ae:33:33:10:c0:
         5a:76:bd:ef:79:f0:54:fb:0a:11:e8:07:14:82:21:f1:61:f7:
         44:d5:8c:00:b7:3a:6a:16:f3:ed:11:29:38:f4:b6:9b:9f:2d:
         1d:f6:f6:bf:fc:6b:91:06:66:3c:f7:9c:ff:ca:3d:e8:53:7d:
         10:59:1f:9e:4c:d5:2b:08:60:2f:59:fe:7f:64:4a:95:fb:31:
         92:53:32:0a:17:49:b2:0b:90:0f:d5:e5:68:09:16:de:62:be:
         a3:a9:68:7a:c2:ad:76:82:4a:24:c3:03:53:7e:f5:3d:cb:6b:
         7a:1e:38:02:3e:74:2b:06:8b:42:66:ab:0e:f7:1e:1a:39:4b:
         9d:2c:e4:e0:c9:c6:52:8d:ec:c3:37:9a:39:57:9e:df:c9:7c:
         2b:a8:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----